Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/e0snf2OEwPxIMEVGv9VOuHk0lqo.roa
File: e0snf2OEwPxIMEVGv9VOuHk0lqo.roa (raw, json)
Hash identifier: DC6xD7HBvETT1O+ZRv5NOaFWvwjgqQnfyLlCvRoHUkE=
Subject key identifier: 7B:4B:27:7F:63:84:C0:FC:48:30:45:46:BF:D5:4E:B8:79:34:96:AA
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 018CC94ACF034FAD33A6F848E0B74B355645
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/e0snf2OEwPxIMEVGv9VOuHk0lqo.roa
Signing time: Tue 02 Jan 2024 08:29:32 +0000
ROA not before: Tue 02 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44788
IP address blocks: 178.250.0.0/21 maxlen: 24
91.199.242.0/24 maxlen: 24
185.235.84.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:cf:03:4f:ad:33:a6:f8:48:e0:b7:4b:35:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jan 2 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b4b277f6384c0fc48304546bfd54eb8793496aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:e4:a7:f8:d9:b2:ae:91:4f:3f:d4:ad:35:
db:06:67:64:88:c0:0a:94:2d:1f:0e:5e:13:52:95:
09:dd:eb:de:30:9e:41:4f:a7:e8:7a:55:8e:c7:2f:
d5:58:e7:ee:fd:5c:e1:40:e9:91:02:71:45:35:6c:
5a:6d:40:e3:7e:5d:90:a1:c9:52:84:39:51:c1:90:
03:f9:2f:b1:b5:35:e6:24:e7:c3:02:b1:b2:bd:cc:
ab:97:cd:bf:0f:00:97:f4:c5:42:bb:d3:04:93:7e:
d3:a2:49:ec:45:a4:c9:88:57:24:d0:fb:63:05:ec:
ff:0e:c1:d9:43:2e:e4:14:f0:1c:d0:b8:5a:c2:66:
28:ae:92:b3:38:a6:86:c9:cf:25:b3:4c:ba:f4:81:
12:e5:41:bd:3e:e5:b3:61:37:19:18:83:fb:bd:41:
01:c0:98:c3:ae:84:e1:dd:c2:db:ec:2f:f6:16:63:
c2:e5:f3:57:07:64:68:32:b8:11:d5:b4:b2:9a:e1:
a2:1b:6e:66:ed:90:53:f0:bd:a8:4e:58:6d:df:e7:
36:7d:2b:a9:3e:f1:58:04:25:53:f4:33:cd:ab:4c:
39:a3:cb:8e:a9:ff:d7:d2:a2:dd:08:35:04:62:8e:
5d:0c:cc:2b:87:0e:ad:fd:34:14:c2:1f:27:28:39:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:27:7F:63:84:C0:FC:48:30:45:46:BF:D5:4E:B8:79:34:96:AA
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/e0snf2OEwPxIMEVGv9VOuHk0lqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/24
185.235.86.0/23
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
9f:aa:46:60:8b:c2:2d:1a:7f:ef:8b:95:e9:d4:3f:06:7c:dd:
e2:fe:3e:5a:d0:5e:9b:b9:d7:75:9a:a0:a2:1a:8e:9b:5c:a2:
f7:83:b0:54:e9:64:b6:b5:8d:50:2b:30:f5:cd:b6:85:0d:4e:
65:71:22:08:3c:f8:32:57:c6:ca:e1:fb:e9:56:d0:d6:c9:2c:
7b:20:92:54:a5:e2:c5:b9:52:4c:1e:53:e2:4b:ac:d5:bf:73:
70:25:2e:b7:85:71:40:ca:27:8a:8e:b8:e0:db:b5:2d:bf:0b:
35:c2:e6:3a:b8:7c:2c:c7:6d:13:6c:bb:ad:44:bb:58:a3:8a:
c5:b3:02:a9:93:01:7c:a3:66:0c:68:da:9f:14:55:78:20:26:
42:4a:48:bc:58:61:48:01:b5:7e:5b:bc:83:19:1b:7a:6b:97:
dc:a0:da:b5:11:60:36:2f:41:f3:56:b3:50:00:47:e8:67:89:
86:3a:d1:ad:c5:84:9d:03:b6:1d:25:5e:b3:dd:6f:fd:5f:c0:
a4:dc:eb:f8:d8:47:08:94:2f:dc:31:ae:02:da:b5:80:39:f0:
26:5e:22:86:12:cb:7d:95:a6:d1:02:92:f3:16:58:af:38:00:
1b:11:ce:b7:4b:86:fd:f9:6a:56:c1:02:82:cf:ce:9b:25:27:
a8:1e:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:24 2024 by rpki-client on console-fra.rpki-client.org